Privacy Policy

1. Data Controller

The data controller for your personal data is RemixLaunch, based in Sweden. If you have any questions about how we handle your data, contact us at privacy@remixlaunch.com.

2. What We Collect

We collect only what we need to run the service:

• Account data — your name and email address, provided when you sign up via Clerk.
• Purchase data — transaction records including the product purchased and purchase date, handled by Stripe. We never see or store your card details.
• Usage data — IP address, browser type, and pages visited, collected automatically to keep the service secure and functional.

3. How We Use Your Data

We use your data to:

• Deliver your purchase and manage your account (contractual necessity).
• Send transactional emails — purchase confirmations, password resets, and important account notices (contractual necessity).
• Detect and prevent fraud and abuse (legitimate interest).
• Comply with Swedish and EU legal obligations, including accounting and tax law.

We do not use your data for advertising or sell it to any third party.

4. Sub-processors

To operate the service we share your data with the following sub-processors, each bound by GDPR-compliant data processing agreements:

• Clerk — authentication and account management.
• Stripe — payment processing. Stripe is certified PCI-DSS Level 1.
• Supabase — database hosting. Data is stored in the EU (Frankfurt region).
• Resend — transactional email delivery.

5. Cookies

We use strictly necessary session cookies to keep you signed in. If you accept analytics cookies via our cookie banner, we may collect anonymised usage statistics to improve the service. You can withdraw cookie consent at any time by clearing your browser cookies or using the cookie settings banner.

6. Data Retention

We keep your account data for as long as your account exists. Purchase records are retained for 7 years to comply with Swedish bookkeeping law (Bokföringslagen). When you delete your account, we remove your personal data within 30 days, except where retention is legally required.

7. Your Rights Under GDPR

As a data subject you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no legal basis to retain it.
• Restriction — ask us to pause processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@remixlaunch.com. We will respond within 30 days. You also have the right to lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY) at imy.se.

8. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated by email or a prominent notice on the site. The "Last updated" date at the top of this page always reflects the current version.